Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: 9/D9CPsCvf/f5Nvc+W0RJdSi0tBmuJH6LNCdaGNRaWE=
Subject key identifier: 1C:55:30:C1:5A:D1:40:0F:FD:0D:B3:B3:35:2D:9C:06:AD:11:FE:18
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 0199FBEC186B9A87A20672A59439B90F9EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0AB9
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: z3C7aSAeAwl46wozI0SDN7XT+zNZNnaY3OicMavHkPM=)
2: p_TDMyzlQ5zmtlyOFxztvJEw2HQ.roa (hash: fmxxB5F2kwLUu456RKJpssuFKFMbicdIEkOy2yPaKKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:18:6b:9a:87:a2:06:72:a5:94:39:b9:0f:9e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=1c5530c15ad1400ffd0db3b3352d9c06ad11fe18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:4d:d6:33:98:cc:d3:f7:0f:6d:d5:7d:b9:
20:9b:73:af:35:fd:a3:54:dc:e2:3e:ce:51:3b:ad:
75:94:04:a6:5a:2d:32:15:cb:5a:19:ee:95:c0:b5:
60:dc:cd:a2:cc:e9:f4:ba:45:ec:d1:2e:32:1c:d0:
d3:c9:48:e0:d4:59:02:07:30:49:3b:c2:0c:77:10:
e4:97:60:8d:60:b0:a8:d2:c5:53:94:de:af:75:49:
87:8b:65:01:1b:f3:d3:dd:eb:1f:c9:24:05:d2:b5:
7b:6a:7c:90:75:f9:75:66:dd:d9:71:92:85:36:14:
87:61:9f:89:d4:5d:43:37:ea:e9:ec:d0:fb:04:ac:
d9:d2:a8:09:48:43:83:03:16:bb:6a:93:42:93:a0:
76:5b:9a:38:27:58:10:e4:16:f8:a1:d6:4a:97:57:
82:c8:27:e0:64:95:5a:22:33:47:db:76:f3:b7:9d:
2e:67:30:cd:46:20:06:32:22:ba:af:71:13:af:eb:
16:55:11:91:c4:c4:24:86:97:1d:d7:84:20:88:0b:
6a:bf:ef:5b:d8:ba:3a:6b:df:ba:7c:41:1d:79:0d:
bb:f7:54:3c:73:57:41:87:eb:79:3a:c8:45:12:d8:
4b:03:b3:6c:09:b7:8e:7a:1d:10:30:0b:6c:dc:3c:
61:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:55:30:C1:5A:D1:40:0F:FD:0D:B3:B3:35:2D:9C:06:AD:11:FE:18
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:69:97:b9:d5:89:5c:5b:e4:43:ad:a4:53:be:97:c1:33:0b:
c9:3c:df:8c:92:9d:8b:b8:bb:33:d3:c3:75:06:d0:ea:8e:ab:
19:c1:59:7e:1c:4a:ff:ed:f9:2e:62:61:75:c6:4d:ec:cf:7f:
e2:b8:80:c2:ab:93:ab:06:ab:8a:17:dc:aa:89:8c:4e:1f:67:
9c:e5:8b:de:f1:74:2b:4b:bf:6e:8f:86:9e:1d:54:ad:6a:b9:
2b:71:3e:38:65:ea:b9:28:85:af:a7:2c:7d:71:8d:7a:34:d9:
05:98:e7:33:82:20:af:9c:9f:e6:c7:22:9e:fe:c6:f8:ad:8f:
fa:e7:ed:72:77:40:77:53:ca:b1:61:8c:01:c9:a3:3f:0c:31:
69:68:c4:67:ae:3e:b5:56:42:a2:62:ff:b0:89:fb:d7:b9:15:
85:1a:5b:dc:6d:7d:9b:c2:c1:1c:82:17:fa:f4:03:8c:ae:9d:
93:92:50:26:45:aa:60:f8:37:59:1d:26:a6:bf:50:11:44:fc:
66:b2:3c:3f:e3:f1:0e:cd:dc:00:72:d1:93:b7:82:e6:a6:20:
23:28:44:7b:da:23:00:c3:1c:b2:bb:87:69:90:ec:95:de:3a:
f4:88:1c:c2:28:7d:92:ca:4a:4e:54:0b:5b:96:7a:3d:28:0b:
ac:cd:51:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77BhrmoeiBnKllDm5D56sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzgxYzYyZDM5NDIwMzNkMGE3NDA0NGIwYzVhNGYxMTNl
NDNkZjMwHhcNMjUxMDE5MTAwMjU3WhcNMjUxMDIwMTAwMjU3WjAzMTEwLwYDVQQD
EygxYzU1MzBjMTVhZDE0MDBmZmQwZGIzYjMzNTJkOWMwNmFkMTFmZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaxN1jOYzNP3D23Vfbkgm3OvNf2j
VNziPs5RO611lASmWi0yFctaGe6VwLVg3M2izOn0ukXs0S4yHNDTyUjg1FkCBzBJ
O8IMdxDkl2CNYLCo0sVTlN6vdUmHi2UBG/PT3esfySQF0rV7anyQdfl1Zt3ZcZKF
NhSHYZ+J1F1DN+rp7ND7BKzZ0qgJSEODAxa7apNCk6B2W5o4J1gQ5Bb4odZKl1eC
yCfgZJVaIjNH23bzt50uZzDNRiAGMiK6r3ETr+sWVRGRxMQkhpcd14QgiAtqv+9b
2Lo6a9+6fEEdeQ2791Q8c1dBh+t5OshFEthLA7NsCbeOeh0QMAts3DxhMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxVMMFa0UAP/Q2zszUtnAatEf4YMB8GA1UdIwQY
MBaAFNHIHGLTlCAz0KdARLDFpPET5D3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84N2Y5NzMtZWE2ZS00N2RmLWIxYjAt
ZGYzMTM4YjQzNGM4LzEvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi84N2Y5NzMtZWE2ZS00N2RmLWIxYjAtZGYzMTM4YjQzNGM4
LzEvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2mXudWJ
XFvkQ62kU76XwTMLyTzfjJKdi7i7M9PDdQbQ6o6rGcFZfhxK/+35LmJhdcZN7M9/
4riAwquTqwarihfcqomMTh9nnOWL3vF0K0u/bo+Gnh1UrWq5K3E+OGXquSiFr6cs
fXGNejTZBZjnM4Igr5yf5scinv7G+K2P+uftcndAd1PKsWGMAcmjPwwxaWjEZ64+
tVZComL/sIn717kVhRpb3G19m8LBHIIX+vQDjK6dk5JQJkWqYPg3WR0mpr9QEUT8
ZrI8P+PxDs3cAHLRk7eC5qYgIyhEe9ojAMMcsruHaZDsld469Igcwih9kspKTlQL
W5Z6PSgLrM1RuQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:13 2025 by rpki-client